2

I require a slightly older version of PHP for my server because I need to be able to exploit a CVE (CVE-2006-7243) that was patched in the newer versions. NOTE: This is a legitimate use case where we're setting up a web based penetration testing system for Computer Science students at my University.

PHP 5.3.3-24 would be perfect.

The current one that yum tries to install is 5.3.3-27.

I've tried sourcing old RPM's and found a lot here: http://www.atomicorp.com/channels/atomic/centos/6/x86_64/RPMS/ but none of them being the version I would like.

How should I tackle installing this version of PHP?

Improve this question
8
  • Exploiting a security issue? Geeze, I feel sorry for any of your customers or clients.
    – mdpc
    Aug 21, 2014 at 7:14
  • It is actually being used for a web based penetration testing system for Computer Science students at my University. I would ideally like to use CentOS 6.5 because I am comfortable with it and can be assured it can't be pwned in any way that I wasn't expecting. I would appreciate it if you could remove your -1
    – 0944_qwerty
    Aug 21, 2014 at 7:17
  • It might be worth explaining why you're after this version in your question - it did look a little suspect at first! Is 5.3.3-23 close enough, which can be found via RPM Bone, or does it have to be *.24?
    – garethTheRed
    Aug 21, 2014 at 7:30
  • If you look at the RPM changelog .23 should suffice. Remi Follet applied the patch to .25 for this exact CVE. See here: zid-lux1.uibk.ac.at/linux/rpm2html/centos/6/updates/x86_64/…. Scroll down to see the changelog for the php RPM.
    – slm ♦
    Aug 21, 2014 at 7:37
  • I would either take .23 or take the .27 SRPM and remove the patch files that were added per the changelog, and rebuild .24 myself. I've looked in all my usual places and am not finding a pre-built option for you.
    – slm ♦
    Aug 21, 2014 at 7:39

1 Answer 1

Reset to default
2

php-5.3.3-23 is available on RPM Bone for RHEL6.4:

It's not the exact version you are after, but may fit the bill. If there are no dependency issues, then it should install.

Improve this answer
1
  • Brilliant, this works fine with CentOS 6.5 FINAL. Thank you for your and the other commenters for their help.
    – 0944_qwerty
    Aug 21, 2014 at 8:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.